{"id":74677,"date":"2022-10-12T05:00:26","date_gmt":"2022-10-12T12:00:26","guid":{"rendered":"https:\/\/forescoutstage.wpengine.com\/?p=74677"},"modified":"2022-10-19T13:47:00","modified_gmt":"2022-10-19T20:47:00","slug":"the-riskiest-connected-devices-in-enterprise-networks","status":"publish","type":"post","link":"https:\/\/www.forescout.com\/blog\/the-riskiest-connected-devices-in-enterprise-networks\/","title":{"rendered":"The Riskiest Connected Devices in Enterprise Networks"},"content":{"rendered":"

The growing number and diversity of connected devices in every industry presents new challenges for organizations to understand and manage the risks they are exposed to. Most organizations now host a combination of interconnected IT, OT and IoT devices in their networks that has increased their attack surface.<\/p>\n

According to a recent report<\/a> by the Ponemon Institute, 65% of responding organizations say that IoT\/OT devices are one of the least secured parts of their networks, while 50% say that attacks against these devices have increased. IT and IT security practitioners in 88% of those organizations have IoT devices connected to the internet, 56% have OT devices connected to the internet and 51% have the OT network connected to the IT network.<\/p>\n

Threat actors are well aware of these trends. We recently reported on how ransomware groups<\/a> have started massively targeting devices such as NAS, VoIP and hypervisors. Not surprisingly, most of these devices were among the riskiest we identified in the 2020 Enterprise of Things Security Report<\/a>.<\/p>\n

In this blog post and in our full report<\/a>, we update our findings from two years ago by analyzing millions of devices in Forescout\u2019s Device Cloud using the Forescout Continuum Platform\u2019s new multifactor risk scoring<\/a> methodology, described below.<\/p>\n

Many of the device types observed among the riskiest in 2020 remain in the list, such as networking equipment, VoIP, IP cameras and programmable logic controllers (PLCs). However, new entries such as hypervisors and human machine interfaces (HMIs) are representative of trends including critical vulnerabilities<\/a> and increased OT connectivity<\/a>.<\/p>\n

Download the Infographic<\/span><\/a><\/div>\n

Quantifying device cybersecurity risk<\/h2>\n

To get a dataset representative of the current device landscape in enterprise networks, we analyzed device data between January 1 and April 30 in Forescout\u2019s Device Cloud, one of the world\u2019s largest repositories of connected enterprise device data including IT, OT, IoT and IoMT. The anonymized data comes from Forescout customer deployments and contains information about almost 19 million devices, a number that grows daily.<\/p>\n

To measure risk on that dataset, we rely on Forescout\u2019s multifactor risk scoring methodology, where the risk of a device is calculated based on three factors: configuration, function and behavior.<\/p>\n